CVE-2005-3559

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-16 · updated 2026-06-16

Description

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter.

Affected products

Digium Asterisk: 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5 (+27)

References

http://osvdb.org/20577
http://secunia.com/advisories/17459
http://secunia.com/advisories/19872
http://securitytracker.com/id?1015164
http://www.assurance.com.au/advisories/200511-asterisk.txt
http://www.debian.org/security/2006/dsa-1048
http://www.securityfocus.com/archive/1/415990/30/0/threaded
http://www.securityfocus.com/bid/15336
http://www.vupen.com/english/advisories/2005/2346
https://exchange.xforce.ibmcloud.com/vulnerabilities/23002
http://osvdb.org/20577
http://secunia.com/advisories/17459

Get alerted when CVE-2005-3559 or the next vulnerability affects your stack